To those of you not using a firewall. Please reconsider.

Here are samples of probed ports in my firewall log TODAY:

4899 - Radmin remote administration worm
15118 - Botnet
139 - Netbios. File and Printer Sharing and windows messenger
135 - Netbios, messenger.
445 - Netbios, used for sharing, messenger
1025 - Worm
2745 - Bagle / Beagle / Tanx backdoor
1023 - Not sure of this one. It’s ordinarily related to a passive FTP connection. Could be scanning for a server.

IP number are from Taiwan, Saudi Arabia and the US.

This entry was posted on Friday, January 28th, 2005 at 1:00 am and is filed under Tech. You can follow any responses to this entry through the RSS 2.0 feed. Both comments and pings are currently closed.